Classification: UNCLASSIFIED Caveats: NONE Hi, Followup: I think that the PKE / Tangible folks may also have some insight on this. If I remember correctly, the tangible folks were using cURL for syncing data between servers that were using x509 server certs. - Aaron -----Original Message----- From: coolkey-devel-bounces@xxxxxxxxxx [mailto:coolkey-devel-bounces@xxxxxxxxxx] On Behalf Of Lippold, Aaron L CIV DISA CIAE Sent: Thursday, September 29, 2011 2:43 PM To: Kamil Dudka; Robert Relyea; glenn.buckholz@xxxxxxxxxxxxxxx Cc: coolkey-devel@xxxxxxxxxx Subject: Re: Using Coolkey with cURL (UNCLASSIFIED) Classification: UNCLASSIFIED Caveats: NONE Hi, I think that the Forge.mil team also used cURL for testing our large file upload feature that we "CAC"/smartcard enabled. Perhaps they can give you some pointers as well. Aaron -----Original Message----- From: coolkey-devel-bounces@xxxxxxxxxx [mailto:coolkey-devel-bounces@xxxxxxxxxx] On Behalf Of Kamil Dudka Sent: Wednesday, September 28, 2011 4:30 PM To: Robert Relyea Cc: coolkey-devel@xxxxxxxxxx Subject: Re: Using Coolkey with cURL On Wednesday 28 September 2011 22:07:36 Robert Relyea wrote: > How is your libcurl built? If you build with NSS, then you should be > able use coolkey/PKCS #11. > > I think libcurl defaults to open /etc/pki/nssdb as the default NSS Yes, this can be overridden by the $SSL_DIR environment variable, although the sql: prefix is hard-wired in libcurl. > database. If you install coolkey using modutil, it should be available. > The only issue is whether or not libcurl can prompt for a password. Yes, see --pass of curl(1) and CURLOPT_KEYPASSWD of curl_easy_setopt(3). Kamil _______________________________________________ Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/coolkey-devel Classification: UNCLASSIFIED Caveats: NONE Classification: UNCLASSIFIED Caveats: NONE
Attachment:
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/coolkey-devel
